CyberRota Analysis
AI-GeneratedOpenPanel's logging mechanism exposes Model Context Protocol authentication tokens by writing them in plaintext to application logs, allowing attackers with access to these logs to capture base64-encoded credentials. This vulnerability could lead to unauthorized access to project analytics through replay attacks. Organizations using OpenPanel should prioritize addressing this issue to mitigate potential data exposure risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenPanel through 2.3.0 writes Model Context Protocol authentication tokens from URL query parameters to plaintext application logs without redaction. Attackers with access to application stdout or centralized logging systems can capture base64-encoded credentials to replay MCP requests and access project analytics.